Run dll Error Cannot Find a File in the Temp Directory

I have a client whose machine I am guessing had a virus or malware on it. When the machine was cleaned up the temp folder was cleaned out. Now on login, he gets a run dll error saying it can not find the file "jork_0_typ_col.exe" in the temp directory. The file is gone, which is why we have the error message. How do I make the run dll error go away? I see nothing in start programs that would cause it.

Popular White Paper On This Topic

Load CCleaner (from Piriform) on the machine. Open it. Go into Tools / Startup. Delete the offending item from the startup. Use the opportunity to disable any items that are taking unnecessary resources at the same time.

Debra,
As I said, I can not find any startup programs with either CCleaner
or in msconfig, that are not known to me as needed or are not working.
Also, I did not see any strange services that did not start.
Thanks,
Dan

Sounds like a rogue registry entry is trying to trigger a run command on that file, which by the way appears to be associated with the Metropolitan Police Ransomware.
You could run a more comprehensive reg cleaner like JV16: http://www.macecraft.com/jv16powertools2012/ on your mates system. You can also download a small program that shows more run reg entries than CCleaner and Windows MSconfig and its called Startup Control panel: http://www.mlin.net/StartupCPL.shtml and its free.

I didn't see that you had tried CCleaner or MSConfig in the original post. Should have guessed, but just checking. For grins, is there anything in there you don't recognize? Sometimes one dll nameswitches for another if its malware.

Did (or does) the machine have a Lexar external drive? There is some indication on websearch that this may relate to that. An anti-malware sweep may have uninstalled that item. If you had one in at one time, you might try re-inserting that drive to let its drivers load and see if it solves the problem.

It looks like your machine isn't clean after all. How was it "cleaned up"? What is the AV software? What does a scan of the computer show? I would also use one of the free scanners from any AV vendor. Also, run Malwarebytes to scan for malware.

You are correct, I did not specifically state CCleaner, etc.. I
just covered that with saying I saw nothing in start up files. I have
also searched the registry for references to jork, which returned
nothing. I had taught him to keep the machine lean on start up program,
so there are only a few there and all are know good programs.
Thanks,
Dan

Thank you all for your help. Problem Solved!!
Debra got me thinking about start up programs. While nothing looked suspicious, I used Lee suggestion of Process Explorer and found ctfmon.lnk showing as a Microsoft program was the culprit.
Thanks again.

I posted a reply online, but it has not showed up, that I credited Lee
with best answer and Debra as being helpful.
The was the following entry in start up marked as a Microsoft program,
but it was not , "ctfmon.lnk". Removed and restarted with no error message.
Thank you all for your help.
Dan

dr> I used Lee suggestion of Process Explorer and found ctfmon.lnk
dr> showing as a Microsoft program was the culprit.

CTFMON.EXE is a valid file related to MS Office but only if it lives
in the C:\Windows\System32 folder - any file of that name that is
found elsewhere is malware and the link to start it is often left
behind when the malware itself has been removed. Good that you tracked
it down at last :-)